IBM System x3250 m4 vulnerabilities

4 CVEs affecting IBM System x3250 m4, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-4030, published 2014-01-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-4031, published 2013-08-09. High severity, CVSS 10.0. EPSS: 2% chance of exploitation in the next 30 days. The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x…
CVE-2013-4030, published 2014-01-21. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat…
CVE-2013-4037, published 2013-08-09. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter,…
CVE-2013-4038, published 2013-08-09. Medium severity, CVSS 4.0. EPSS: 0.8% chance of exploitation in the next 30 days. The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers uses cleartext…